Updated Cyber Threat Actor Naming System

GTIG announces a unified cryptonym-based naming convention for threat actors: a memorable two-word cryptonym where the first word uniquely identifies the actor (reusing prior names when available) and the second word categorizes motivation, attribution, or activity type (e.g., CASTLE for China, ION for Iran, NEPTUNE for North Korea, RELIC for Russia, COMET for cybercriminals). The release explains rationale, mapping examples, preservation of legacy aliases and MITRE ATT&CK mappings, and notes that renaming of the most active groups will roll out progressively.